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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



1 . (Previously Presented) A method comprising: 

sensing a user device coupled to a port of a network access device; 

determining if the user device supports a user authentication protocol; and 

placing the port into a semi-authorized access state if it is determined that the user device 

does not support the user authentication protocol, the semi-authorized access state 

providing the user device with limited network access. 

2. (Previously Presented) The method of claim 1, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

3-4. (Cancelled) 

5. (Previously Presented) The method of claim 1, wherein the placing comprises selectively 
placing the port into one of a plurality of semi-authorized access states. 

6. (Previously Presented) The method of claim 5, wherein the placing comprises: 
determining a type of the user device; and 

selectively placing the port into one of a plurality of semi-authorized access states based on 
the type of the user device. 



Page 2 of 19 



Attorney Docket No.: FOUND-0057 (034103-048) 

7. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising a Voice over Internet Protocol (VoIP) network. 

8. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising the Internet if the user device is a portable computing 
device. 

9. (Previously Presented) The method of claim 1 , wherein the user authentication protocol is 
IEEE 802.1x. 

10. (Previously Presented) The method of claim 1, wherein the network access device 
comprises a network switch. 

1 1 . (Previously Presented) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 
the plurality of output ports; and 

control logic adapted to determine whether a user device coupled to one of the plurality of 
input ports supports a user authentication protocol used by a host network, and to place 
the one of the input ports in a semi-authorized access state if the authentication protocol 
is not supported, the semi-authorized access state providing the user device with limited 
network access. 
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12. (Previously Presented) The device of claim 11, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

13-14. (Cancelled). 

15. (Previously Presented) The device of claim 11, wherein the control logic is adapted to 
selectively place the one of the input ports into one of a plurality of semi-authorized access 
states. 

16. (Previously Presented) The device of claim 15, wherein the control logic is adapted to 
determine a type of the user device and to selectively place the one of the input ports into 
one of a plurality of semi-authorized access states based on the type of the user device. 

17. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising a Voice over Internet Protocol (VoIP) 
network. 

18. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising the Internet if the user device is a portable 
computing device. 
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19. (Previously Presented) The device of claim 11, wherein the user authentication protocol is 
IEEE 802. lx. 



20. (Previously Presented) A network system, comprising: 

a host network that uses a user authentication protocol; 

a network access device communicatively coupled to the host network; and 

a user device coupled to a port of the network access device; 

wherein the network access device is adapted to determine whether the user device 
supports the user authentication protocol and to place the port in a semi-authorized 
access state if the user authentication protocol is not supported, the semi-authorized 
access state providing the user device with limited network access. 



21 . (Currently Amended) The network system of claim 20, wherein the semi-authorized state 
limits access by the user device to a network, the network selected from the group 
comprising a Voice Over Internet Protocol (VoIP) network, the Internet, and a low-security 
low - scurity virtual local area network (VLAN). 



22-23. (Cancelled) 



24. (Previously Presented) The network system of claim 20, wherein the network access device 
is adapted to selectively place the port into one of a plurality of semi-authorized access 
states. 
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25. (Previously Presented) The network system of claim 24, where the network access device is 
adapted to determine a type of the user device and to selectively place the port into one of a 
plurality of semi-authorized access states based on the type of the user device. 

26. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi- authorized access state that 
limits access by the user device to a network comprising a Voice over Internet Protocol 
(VoIP) network. 

27. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising the Internet if the user device 
is a portable computing device. 

28. (Previously Presented) The network system of claim 20, wherein the user authentication 
protocol is IEEE 802. lx. 

29. (Previously Presented) The network system of claim 20, wherein the network access 
device is a network switch. 

30. (Previously Presented) A program storage device readable by a machine, embodying a 
program of instructions executable by the machine to perform a method, the method 
comprising: 

sensing a user device coupled to a port of a network access device; 

determining if the user device supports a user authentication protocol; and 
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placing the port into a semi-authorized access state if it is determined that the user device 
does not support the user authentication protocol, the semi-authorized access state 
providing the user device with limited network access. 

31. (Previously Presented) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; 
means for determining if the user device supports a user authentication protocol; and 
means for placing the port into a semi-authorized access state if it is determined that the user 

device does not support the user authentication protocol, the semi-authorized access 

state providing the user device with limited network access. 

32. (Previously Presented) A method comprising: 

sensing a user device coupled to a port of a network access device; and 

allowing the user device limited access to a network via the network access device if it is 

determined that the user device is unable to communicate using a particular user 

authentication protocol. 

33. (Previously Presented) The method of claim 32, further comprising performing further user 
authentication in accordance with the user authentication protocol if it is determined that the 
user device is able to communicate using the user authentication protocol. 

34. (Previously Presented) The method of claim 32 wherein the limited access comprises less 
access than access afforded a user device that is successfully authenticated using the user 
authentication protocol. 
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35. (Previously Presented) The method of claim 34 wherein the limited access comprises access 
to a low-security Virtual Local Area Network (VLAN). 

36. (Previously Presented) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 

the plurality of output ports; and 
control logic configured to allow the user device limited access to a network if it is 

determined that the user device is unable to communicate using a particular user 

authentication protocol. 

37. (Previously Presented) The network access device of claim 36 wherein the control logic is 
further configured to perform further user authentication in accordance with the user 
authentication protocol if it is determined that the user device is able to communicate using 
the user authentication protocol. 

38. (Previously Presented) The network access device of claim 36 wherein the limited access 
comprises less access than access afforded a user device that is successfully authenticated 
using the user authentication protocol. 

39. (Previously Presented) The network access device of claim 38 wherein the limited access 
comprises access to a low-security Virtual Local Area Network (VLAN). 
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40. (Previously Presented) A program storage device readable by a machine, embodying a 
program of instructions executable by the machine to perform a method, the method 
comprising: 

sensing a user device coupled to a port of a network access device; and 

allowing the user device limited access to a network via the network access device if it is 

determined that the user device is unable to communicate using a particular user 

authentication protocol. 

41. (Previously Presented) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; and 
means for allowing the user device limited access to a network via the network access 

device if it is determined that the user device is unable to communicate using a 

particular user authentication protocol. 
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